As in Indiana and Kentucky, the start of 2026 brought into effect Rhode Island’s comprehensive consumer privacy law, the Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA). This statute is not simply a replica of what has come
Latest from Taft Privacy & Data Security Insights - Page 5
Your 2026 Privacy, Security, and Artificial Intelligence Checklist
Enforcement activity surged in 2025, with landmark judgments and settlements—some reaching eight and nine figures—targeting issues such as ad tracking, analytics, wiretapping, text messaging, data subject rights, and sensitive data collection. This aggressive trend shows no signs of slowing as
Kentucky Consumer Data Protection Act: Key Takeaways for the New Bluegrass Statute
As we begin 2026, Kentucky has officially enacted the Kentucky Consumer Data Protection Act (KCDPA), a comprehensive privacy statute that took effect on January 1, 2026. As with Indiana, is KCDPA is modeled on the now‑familiar Virginia‑style framework. The
HOO- HOO- HOO- HOOSIERS Brace for Indiana Consumer Data Protection Act
Indiana has joined the growing list of states with a comprehensive consumer privacy statute, codified at Indiana Code 24‑15 and effective January 1, 2026.
The law follows the “Virginia model,” but introduces several nuances that will matter for organizations doing
President Trump Signs Executive Order to Limit State AI Regulation
President Trump’s Dec. 11, Executive Order, “Ensuring a National Policy Framework for Artificial Intelligence” (the “order”), targets what the administration views as burdensome and fragmented state AI regulation in favor of a single national framework.
Although the order does not
Closing Out 2025: Key Privacy & Data Security Updates from Taft
As 2025 comes to a close, we asked several members of Taft’s Privacy and Data Security practice group to share their thoughts on what should be on a client’s “wish list” for the holiday season, or on a list of
New App Store Accountability Laws in 2026: If Your Business Has an App, Read On
State regulators are increasingly prioritizing children’s data privacy. These efforts follow several changes to protect children’s online privacy at the federal level. One of the latest sweep of changes involve several states (e.g., California, Louisiana, Texas and Utah) imposing
California’s SB 361: Updated Data Broker Requirements
What to Know: Your Company Website and the California Information Privacy Act
An ongoing issue many of our clients are dealing with are claims under the California Information Privacy Act (CIPA). This is actually a criminal statute and should not be confused with the California Consumer Privacy Act (CCPA).
A cottage industry
Passwords, Policies, and Trade Secrets: Lessons from NRA Group v. Durenleau and what it Means for Employers
On August 26, 2025, in NRA Group, LLC v. Durenleau et al., the U.S. Court of Appeals for the Third Circuit addressed two legal questions: (1) whether workplace policy infractions can turn into federal crimes, and (2) whether passwords protecting